Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/5faAa3oFHnu7fWmI4n12Q2natwg.mft
File: 5faAa3oFHnu7fWmI4n12Q2natwg.mft (raw, json)
Hash identifier: 1MOJZvDGk1chGa1+LUU53kXI83TMga6k7csNXx/ezxg=
Subject key identifier: 9C:05:D5:BA:A6:95:9F:05:88:34:27:5C:91:36:DE:A3:34:41:00:D2
Authority key identifier: E5:F6:80:6B:7A:05:1E:7B:BB:7D:69:88:E2:7D:76:43:69:DA:B7:08
Certificate issuer: /CN=e5f6806b7a051e7bbb7d6988e27d764369dab708
Certificate serial: 019F8F7F359974C63121A094DC15264F7249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5faAa3oFHnu7fWmI4n12Q2natwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/5faAa3oFHnu7fWmI4n12Q2natwg.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:46 +0000
Manifest this update: Thu 23 Jul 2026 15:01:46 +0000
Manifest next update: Fri 24 Jul 2026 15:01:46 +0000
Files and hashes: 1: 5faAa3oFHnu7fWmI4n12Q2natwg.crl (hash: voQ756C+BH93kF5j8fR2w+gVFiGqVCb2E5w3V1F6xLo=)
2: EGmqqxW5ZYbNCgCt2Vq_Q58zgsI.roa (hash: ySnS4b15lR12wDURMnuDTotPGmQ1ihETTA194Gje264=)
3: MLis4Ykeq134DtJNXq9CJl9fboI.roa (hash: eUp4Hgfo5Ah//leDvRhzGDMVb52xFarJLqKnvTIe10E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/5faAa3oFHnu7fWmI4n12Q2natwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/5faAa3oFHnu7fWmI4n12Q2natwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5faAa3oFHnu7fWmI4n12Q2natwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:35:99:74:c6:31:21:a0:94:dc:15:26:4f:72:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f6806b7a051e7bbb7d6988e27d764369dab708
Validity
Not Before: Jul 23 15:01:46 2026 GMT
Not After : Jul 24 15:01:46 2026 GMT
Subject: CN=9c05d5baa6959f058834275c9136dea3344100d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ab:f0:ad:2b:bb:07:7a:74:dd:45:f7:d0:ec:
f7:99:37:0f:44:e8:fc:11:21:cb:f0:2a:21:96:fa:
a4:1a:6e:68:fe:f9:20:c8:86:9e:b1:53:4d:c1:f4:
b6:42:6b:78:7d:0f:e0:8d:fa:23:4a:3d:a8:5d:53:
1a:6d:cf:64:46:23:93:b5:3c:7a:60:82:ab:cc:1a:
a0:64:be:db:ac:df:17:52:af:6b:76:b2:a6:0f:b5:
27:6a:9c:74:03:71:a4:c3:e2:27:75:62:72:f0:80:
04:47:26:1a:4f:60:2d:bc:32:3a:a8:26:b5:a3:0e:
6b:a6:5a:43:c6:9f:35:4f:d1:84:c2:ef:20:2a:b3:
14:49:41:2b:5b:20:9e:e1:83:19:13:f4:84:fb:3c:
8a:97:7a:fb:89:53:9e:20:02:fd:3b:69:97:44:50:
52:57:4d:4f:1a:df:d4:bd:43:dc:86:36:29:e5:5c:
d3:bd:92:ac:61:70:72:6b:33:15:36:34:c8:dc:71:
5c:a5:1e:24:98:71:64:ea:f1:78:c8:c3:e6:6d:dd:
35:82:6e:9c:a1:6a:31:8b:37:a3:42:46:d1:95:5e:
48:8b:4b:91:06:80:3a:7c:e6:3d:36:a0:67:9a:5b:
6b:b9:27:34:28:da:66:ec:40:ac:7c:97:01:57:86:
12:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:05:D5:BA:A6:95:9F:05:88:34:27:5C:91:36:DE:A3:34:41:00:D2
X509v3 Authority Key Identifier:
keyid:E5:F6:80:6B:7A:05:1E:7B:BB:7D:69:88:E2:7D:76:43:69:DA:B7:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5faAa3oFHnu7fWmI4n12Q2natwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/5faAa3oFHnu7fWmI4n12Q2natwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/5faAa3oFHnu7fWmI4n12Q2natwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:bf:5a:35:43:c4:66:ec:ef:73:27:df:7d:b4:19:6d:24:13:
3e:e5:cc:10:a1:9c:bd:ab:21:1c:0c:31:32:a3:25:92:d7:dc:
d7:ef:aa:ba:75:5b:78:65:85:49:cb:d3:2e:bd:fb:d9:ed:1f:
d4:a3:2b:0a:5c:09:f1:55:dc:55:65:bd:e9:a0:16:11:74:6d:
03:d5:20:68:cd:13:9f:80:2b:53:d3:fd:55:b3:2e:af:b9:bf:
1f:96:d6:85:eb:f8:ad:a6:9a:5e:ee:0d:5a:43:78:e3:98:ce:
1c:e1:5b:f5:6e:d1:41:94:07:01:c6:d4:3b:c6:b7:2f:ed:e1:
7c:a7:74:9b:66:14:fd:e4:49:22:30:00:4c:fc:cf:27:92:e9:
de:52:17:a8:ed:2d:21:dd:ca:57:5b:1d:43:ad:73:4a:c9:ed:
df:a6:7a:49:3b:d8:cb:c0:76:ae:c1:07:67:c2:56:e8:a4:df:
65:05:74:96:0b:41:92:ae:5f:4e:a3:9d:90:46:28:1c:ea:7b:
84:60:bb:4b:06:8d:52:a4:20:cc:91:a3:e5:1c:68:06:ce:8d:
30:e6:00:66:5e:a3:b9:26:5b:cb:57:98:8d:99:d7:d8:55:37:
01:70:24:93:b9:d7:f6:97:23:a5:b3:4b:9a:36:89:57:8d:8b:
26:82:c9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:19 2026 by rpki-client